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"q I Abstract 

, For a given curve X and divisor class C, we give lower bounds on the degree of 

lO \ a divisor A such that A and A — C belong to specified semigroups of divisors. For 

^ ' suitable choices of the semigroups we obtain (1) lower bounds for the size of a party 

I— I . A that can recover the secret in an algebraic geometric linear secret sharing scheme 

\ with adversary threshold C, and (2) lower bounds for the support A of a codeword 

^ ' in a geometric Goppa code with designed minimum support C. Our bounds include 

. and improve both the order bound and the floor bound. The bounds are illustrated 

\ for two-point codes on general Hermitian and Suzuki curves. 

^ : Introduction 

> : 

^ . Two recent results motivated this paper. The first is the complete description of the 

! minimum distance of Hermitian two-point codes by Homma and Kim [HK06J . The sec- 

CN \ ond is the introduction of algebraic geometric linear secret sharing schemes by Chen and 

O ; Cramer [CC06]. 

^ ' For algebraic geometric codes, the actual value of the minimum distance is not a priori 

O ■ known and needs to be determined or estimated from the data used in the construction. 

>■ ! The best known lower bounds for the minimum distance of an algebraic geometric code 

■ order bound and the floor bound. Beelen |Bee07] . and independently the second 

\-{ ' author [Par], have shown that the order bound agrees, for Hermitian two-point codes, 

with the actual minimum distances found by Homma and Kim. In this paper we improve 
both the order bound and the floor bound. We illustrate our results and the obtained 
improvements for two-point codes from the Suzuki curves. 

An important application of secret sharing schemes is secure multi-party computation, 
which requires linear secret sharing schemes with a multiplicative property |CDM00j . 
(CDG"'"05] . Chen and Cramer proposed to use one-point algebraic geometric codes for 
secret sharing and they have shown that the obtained algebraic geometric linear secret 
sharing schemes can be used for efficient secure computation over small fields |CC06j . 
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Parties can reconstruct a secret uniquely from their shares only if the total number of 
shares exceeds the adversary threshold of the secret sharing scheme. The algebraic ge- 
ometric construction of a linear secret sharing scheme guarantees a lower bound for the 
adversary threshold. The precise value of the threshold is in general not known. We 
show that the adversary threshold corresponds to the minimum distance between cosets 
of a code. Our results give improved lower bounds for distances between cosets of an 
algebraic geometric code, and therefore improved lower bounds for adversary thresholds 
of algebraic geometric linear secret sharing schemes. 

As our main results, we formulate an ABZ bound for codes and an ABZ bound for 
cosets. The bounds improve and generalize the floor bound and the order bound, respec- 
tively. For each of the bounds, we illustrate the improvements with examples from the 
Suzuki curves. The bounds can be used as tools for constructing improved codes as well 
as improved secret sharing schemes. Our Main theorem is an even more general bound. 
Its main advantage is that it has a short proof and that all other bounds can be obtained 
as special cases. 

The floor bound is independent of the order bound. Algorithms are available for decod- 
ing up to half the order bound but not for decoding up to half the floor bound. Beelen 
|Bee07j gives an example where the floor bound exceeds the order bound. For our gen- 
eralizations there is a strict hierarchy. The improved order bound, obtained with the 
ABZ bound for cosets, is at least the ABZ bound for codes, which improves the floor 
bound. We show that decoding is possible up to half the bound in our main theorem, 
and therefore up to half of all our bounds. In particular, we obtain for the first time an 
approach to decode up to half the floor bound. 

In Section [H we describe the use of linear codes for secret sharing and the relation 
between coset distances and adversary thresholds. Theorem 11.21 gives a general coset 
bound for linear codes. Appendix |X] gives a coset decoding procedure that decodes up 
to half the bound. Algebraic geometric codes are defined in Section [2j Theorem 12.41 
gives the ABZ bound for algebraic geometric codes with a first proof based on the AB 
bound for linear codes. Section [3] gives a geometric characterization of coset distances 
for algebraic geometric codes. In Section H] we define, for a divisor C and for a point P, 
a semigroup ideal 

Tp{C) = {A : L{A) ^ L{A -P)A L{A -C)^L{A-C- P)} 

such that the minimal degree for a divisor A in Tp{C) is a lower bound for the coset 
distance of an algebraic geometric code. In Section [5l the main theorem gives a lower 
bound for the degree of a divisor in the semigroup ideal (Theorem 15. 3p . In Sectional 
we formulate the ABZ bound for cosets (Theorem 16. 6p and we describe its relation to 
both the order bound (Theorem 16.31) and the floor bound (Theorem 12. Sp . The successful 
application of our bounds depends on the possibility to analyse the complement 

^p{C) = {A : L{A) ^ L{A - P) A L{A -C) = L{A-C- P)} 
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and to compare naturally defined subsets of Ap(C). Section [7] gives important basic 
relations among delta sets. In Section [HI we define a discrepancy, for given points P and 
Q, as a divisor A G Ap{Q) = Aq{P). Discrepancies are our main tool for analyzing and 
improving lower bounds for coset distances in large families of codes. In Section [9], we give 
two proofs, one due to [Bee07] . [Par], and one new, for lower bounds for the minimum 
distance of Hermitian two-point codes. In Section [10], we determine discrepancies for 
Suzuki curves, and we give examples of the ABZ bound for codes, the ABZ bound for 
cosets, and the main theorem, that improve previously known bounds. 

1 Cosets of linear codes 

Let F be a finite field. A F-linear code C of length n is a linear subspace of F". The 
Hamming distance between two vectors x,y G F" is d{x,y) = \{i : Xi ^ yi}\. The 
minimum distance of a nontrivial linear code C is 



If d{C) > 2t + 1 and if ?/ G F" is at distance at most t from C then there exists a unique 
word c G C with d{c, y) < t. 

The Hamming distance between two nonempty subsets X, F C F" is the minimum 
of {d{x, y) : X E X,y E Y}. For a proper subcode C C C, the minimum distance of the 
collection of cosets C/C is 



Lemma 1.1. If d{C/C') > 2t + 1 and ifyE¥^ is at distance at most t from C then there 
exists a unique coset c + C E C/C with d{c + C',y + C) < t. 

The dual code P of C is the maximal subspace of F*^ that is orthogonal to C with 
respect to the standard inner product. To the extension of codes C/C corresponds an 
extension of dual codes T>' /T> with distance parameter d{T>' /T>). For two vectors x, ?/ G F", 
let X * ?/ G F" denote the Hadamard or coordinate-wise product of the two vectors. 

Theorem 1.2. (Shift hound or Coset hound) Let C/C\ he an extension of¥-linear codes 
with corresponding extension of dual codes T>i/V such that dimC/Ci = dimDi/D = 1. 
// there exist vectors Oi, . . . , and bi, . . . such that 



d{C) = min {d{x, y) : x,y E C,x ^ y} 
= min {d{x, 0) : x G C, x 7^ 0}. 



d{C/C) = min {d{x + C,y + C) : x,y e C,x - y ^ C} 
= min {d{x, 0) : x G C, x ^ C}. 




ai *bj G V for i + j < w, 
tti * bj G Vi\D for i + j = w + 1, 



then d{C/Ci) > w. 
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Proof. For all c G C\Ci and a * 6 G Vi\D, ^^aihiCi 7^ 0. To show the nonexistence of a 
vector c G C\Ci with (i(c, 0) < w, it suffices to show, for any choice of w — 1 coordinates, 
the existence of a vector a * 6 g T>i\D that is zero in those coordinates. The conditions 
show that the vectors linearly independent, and there exists a nonzero 

linear combination a of the vectors ai, . . . , vanishing aX w — 1 given coordinates. If 
i is maximal such that has a nonzero coefficient in the linear combination a then 
a * G T>i\D is zero in the — 1 coordinates. □ 

Let ?/ G F" be a word at distance at most t from C. For given vectors and 
bi, . . . ,buj such that w > 2t, the unique coset c + Ci G C/Ci with (i(c + Ci, ?/ + Ci) < t 
can be computed efficiently with the coset decoding procedure in Appendix [XI Theorem 
11.21 can be used to estimate the minimum distance d{C/C') of an extension C/C with 
dimC/C > 1, after dividing C/C into subextensions. 

Lemma 1.3. Let C/C be an extension of ¥ -linear codes of length n. For C D C" G C , 

d{C/C) = mm{d{C/C"),d{C"/C)}. 

We will now describe the use of code extensions for secret sharing. Our description 
focuses on the connection between secret sharing thresholds and coset distances that will 
be established in Corollary ll.7[ The main properties that we need are described in the 
following two lemmas. 

Lemma 1.4. Let {1,2, ... ,n} = I U J be a partition of the coordinates. There exists 
a word r G C\Ci with support in I if and only if there exists no word s G 'Di\D with 
support in J. 

Proof. Let Ej (resp. Ej) be the subspace of F" of all vectors with support in / (resp. 
J). The exact sequences 

— >cn Ei/Ci n Ei — >c/Ci — >c + Ej/c + Ei — >o, 
— >Vin Ej/v n Ej — >Vi/v — >Vi + Ej/v + Ej — ^ o, 

are in duality via V ^ V* = Hom(V, F). And 

(dimC n Ei/Ci n Ej) + (dim Pi n Ej/V n Ej) = dimC/Ci = 1. 

□ 

Lemma 1.5. Let yi G Vi\D. For a given vector s G Vi = V (B (yi) , the projection of 
s on (yi) is uniquely determined by the subset of coordinates {sj : i G A} if and only if 
Vi\D contains no word that is zero in the positions A. 

Proof. The only if part is clear. For the if part we may assume with the previous lemma 
that there exists r G C\Ci with support in A. For any such r, and for s = y + \yi, y gV, 

r.s = r-{y + \yi) = A(r ■ y^). 

Since (r ■ yi) 7^ 0, we obtain A = (r ■ s)/(r ■ yi). □ 
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Let Hi G Vi\D. For a secret A G F, and for a random vector y & V, the vector 
s = y + Xyi is called a vector of shares for A. A subset A C {1, 2, . . . , n} is called qualified 
if the shares {si : i E A} determine A uniquely. Whether A is qualified depends on "Di/P 
but not on the vector of shares s G Pi. Let r{T>i/V) denote the collection of all subsets 
A C {1,2, ... ,n} that are qualified for 'Di/'D and let A(Di/P) denote the collection of 
all subsets ylc{l,2,...,?7,} that are not qualified for Di/'D. For the definition and main 
properties of a general linear secret sharing scheme we refer to [CDG"'"05] . 

Theorem 1.6. Let C/Ci and D\jD he dual extensions of¥-linear codes of length n. Let 
Ea he the suhset ofF"' of all vectors with support in A. 

T{Di/D) = {A:CnEA^CinEA}, 
A{Pi/D) = {A : C n = Ci n Ea}. 

Moreover, for A = {1, 2, . . . , n}\A, 

r(C/Ci) = {A:Ae A{D,/D)}, 
A(C/Ci) = {A:Ae r(i?i/P)}. 

Proof. Lemma 11.51 and Lemma 11.41 □ 

Corollary 1.7. The smallest qualified suhset for Di/D is of size 

mm{\A\ : A G T{Di/D)} = d{C/Ci). 

The largest unqualified suhset for Di/D is of size 

max{\A\ : A G A{Di/D)} = n- diD^/D), 

2 Algebraic geometric codes 

Let X/¥ be an algebraic curve (absolutely irreducible, smooth, projective) of genus g 
over a finite field F. Let F(X) be the function field of X/F and let VL{X) be the module 
of rational differentials of X/F. Given a divisor E on X defined over F, let L{E) denote 
the vector space over F of functions / G F(X)\{0} with (/) + E >Q together with the 
zero function. Let VL{E) denote the vector space over F of differentials uo G i7(X)\{0} 
with {uo) > E together with the zero differential. Let K represent the canonical divisor 
class. 

For n distinct rational points Pi, . . . , P„ on X and for disjoint divisors D = Pi+- ■ 
and G, the geometric Goppa codes Cl{D, G) and Cn{D, G) are defined as the images of 
the maps 

aL : L{G) F", / ^ ( /(Pi), . . . , /(P^ ), 

ao, : Vt{G - D) — > F", u; i-^ ( resp^ (u;), . . . , resp„(u;) ). 
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The maps establish isomorphisms L{G)/L{G - D) ~ Cl(L',G) and n{G - D)/n{G) ~ 
Gq{D, G). With the Residue theorem, the images are orthogonal subspaces of F". With 
the Riemann-Roch theorem they are maximal orthogonal subspaces. 

There exists a nonzero word in Gl{D,G) with support in A, for < A < D, if 
and only if L{G — D + A)/L{G — D) ^ 0. There exists a nonzero word in Gn{D,G) 
with support in A, for < A < D, if and only if Q{G - A)/Q{G) 7^ if and only if 
L{K -G + A)/L{K -G) ^0. 

Proposition 2.1. 

d{CL{D,G)) = min{degA : < A < D \ L{A - C) L{-C)}, for C = D - G. 
d{Cn{D, G)) = min{deg A : < A < D \ L{A - G) L{-C)}, forG = G~K. 

Theorem 2.2. ( Goppa bound) A nonzero word in Gl{D, G) has weight w > deg (D — G). 

A nonzero word in Gn{D, G) has weight w > deg {G — K). 

The following bound improves on the Goppa bound in special cases ( |CT05j . |MM06j . 
[LMOG] ). 

Theorem 2.3. (Floor bound) Let G = K + G = A + B + Z, for Z > such that 
L{A + Z) = L{A) and L{B + Z) = L{B). For D with D n Z = (/), a nonzero word in 
Gn{D, G) has weight at least deg G + deg Z . 

Most algebraic bounds for the minimum distance of a linear code rely on one of two 
basic arguments. In the paper |vLW86j on cyclic codes they were named the AB bound 
and the Shift bound. We obtain the following bound, which includes the floor bound, 
using the AB bound argument in combination with the Goppa bound. 

Theorem 2.4. (ABZ bound for codes) Let G = K+G = A+B+Z, forZ >0. For D with 
DnZ = a nonzero word in Gn{D,G) has weightw > l{A)-l{A-G) + l{B)-l{B-G). 

Proof. We may assume that A and B are disjoint from D. Since Z > and D (1 Z = ^, 
the code Gl{D,G) contains the code Gl{D,A + B) as a. subcode. Thus, for a word 
c G Gq{D,G), and for words a G Gl{D,A) and b G Gl{D,B), if c has support D' then 
Spg£)/ apbpcp = 0. The last orthogonality holds for all a G Gl{D', A) and b G Gl{D', B), 
so that dim G l{D', A) + dim GLiD',B) < degD', and degD' > 1{A) -1{A- D') +1{B) - 
1{B-D'). Together with L(D'-C) ^ 0, degD' > 1{A) -1{A-G) + 1{B) -1{B -G). □ 

Example 110.41 gives a code for which the ABZ bound improves both the floor bound 
and the order bound. It is easy to see, using the Riemann-Roch theorem, that the choice 
Z = returns the Goppa bound. Improvements of the Goppa bound are obtained only 
if the divisors A, B, and Z, are carefully chosen. For the special case L{A + Z) = L{A) 
and L{B + Z) = L{B), we recover the floor bound. In that case, for K + G = A + B + Z , 

1{A) - 1{A -G) + 1{B) - 1{B - G) 
= 1{A + Z)-l{K -B- Z) + 1{B + Z)-l{K ~A-Z) 
= deg{A + Z) + deg{B + Z) + 2 - 2g = degG + deg Z. 
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3 Cosets of algebraic geometric codes 

Let V = Cn{D, G) and C = Cl{D, G) be dual algebraic geometric codes. For a point P 
disjoint from D, let 

V,/V = Cn{D,G-P)/Cn{D,G), 
C/Ci = Cl{D,G)/Cl{D,G-P), 

be dual extensions of codes. When dimC/Ci = dim Pi /P = 1, the extensions can be 
used for secret sharing as described in Section [H Theorem 11.61 describes the parties that 
can recover the secret for the extension T>i/V as the subsets < A < D that support 
a word in C/Ci. The formulation in terms of divisors is given in Proposition 13.21 with 
a similar result for the extension C/Ci in Proposition 13. 4[ As additional motivation, we 
give a natural choice for the secret for each of the extensions 'Di/'D and C/Ci, and we 
describe directly the qualified parties that can determine the secret, in Lemma (3.11 and 
Lemma 13. 3[ respectively. The propositions can then also be obtained from the lemmas. 

Let P have multiplicity e in G, and let t be a fixed local parameter for P. For 
dimPi/D = 1, there exists a natural isomorphism Q{G — D — P)/Q{G ~ D) ~ 'Di/V ~ F 
that maps uj G Vt{G — D — P)/Q{G — D) to iesp{t~^uj). For dimC/Ci = 1, there exists 
a natural isomorphism L{G)/L{G - P) ~ C/Ci ^ F, that maps / G L{G)/L{G - P) to 

Lemma 3.1. For uj G Q{G — D — P), the residue resp(t~^co')(P) is uniquely determined 
by the values {/(P) : P e A} , for < A < D, zf and only if VL{G - D + A - P) = 
n{G-D + A). 

Proposition 3.2. For the extension of codes T>i/V = Cn{D,G — P)/Cn{D,G), where 
D = Pi + ■ ■ ■ + Pn is a sum of n distinct points, G is a divisor disjoint from D, and P 
is a point disjoint from D, 

V{Vi/V) = {d < A < D : C n Ea CiH E^}, 

= {<d < A < D : L{G - D + A) ^ L{G - D + A - P)}. 

A{Vi/V) = {0<A<D:CnEA = Cir] Ea}, 

= {0<A<D: L{G - D + A)= L{G -D + A- P)}. 

Proof. In each case, the two descriptions are clearly equivalent. The first description of 
r ("Di/'D) uses Theorem ll.6[ The second description uses Lemma [3.11 □ 

Lemma 3.3. For f G L{G), the value {t'^ f){P) is uniquely determined by the values 
{f{P) : P e A}, forO < A< D, if and only if L{G - A) = L{G - A - P). 
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Proposition 3.4. For the extension of codes C/Ci = Cl{D,G)/Cl{D,G — P), where 
D = Pi + ■ ■ ■ + Pn is a sum of n distinct points, G is a divisor disjoint from D, and P 
is a point disjoint from D, 

T{C/Ci) = {<d<A<D:VinEAT^Vn Ea], 

= {<d<A<D: Vl{G -A-P)^ Vl{G - A)}. 

A(C/Ci) = {<d<A<D ■.VinEA = vn Ea], 

= {<d<A<D: Vl{G - A-P) = Vl{G - A)}. 

Proof. As in Proposition 13.21 but use Lemma I3.3[ □ 

The propositions are related via the duahties A G TiVi/V) if and only ii D — A & 
A(C/Ci) and A E T{C/Ci) if and only ii D - A E A{Vi/V) (as Theorem [L6D. The 
minimal degree of a divisor A E r{Vi/V) or A G r(C/Ci) is given by the coset distance 
d{C/Ci) or d(Vi/V), respectively (as in Corollary II. 7p . 

Proposition 3.5. 

d{C/Ci) = minjdeg A : < A < D \ L{A - G) L{A - C - P)}, forG = D~G, 
d{Vi/V) = min{deg A : < A < D \ L{A - G) ^ L{A - G - P)}, for G = G - K - P. 

For a given divisor G and a point P, let 

rp{G) = {A : L{A) ^ L{A - P) A L{A -G)^L{A-G- P)}, 

and let 7p(C) be the minimal degree for a divisor A E Vp{C). So that 7p(C) > 
max{0, degC}. 

Theorem 3.6. For the extensions of codes T>i/T> = GQ{D,G — P)/Gn{D,G) andC/Ci = 
Gl{D,G)/Gl{D,G-P), 

A E T{Vi/V) degA > -fp{D - G) > n- degG. 

A E A{Vi/V) degA < n- -fp{G - K - P) < n-degG + 2g-l. 

AeV{C/Ci) degA > ^p{G - K - P) > degG -2^ + 1. 
AeA{C/Ci) degA < n-^p{D-G) < degG. 

The lower bounds for degA that are obtained with '~fp{D — G) and 7p(G — K — P) 
use the assumption L{A) ^ Li^A — P) instead of the stronger assumption ^ < A < D . 
Thus, when the bound for degA is not attained by divisors A of the form < A < 
the bounds will not be optimal. Essentially, we separate the problem of finding a small 
A E r(Pi/P) into two parts: a geometric part that considers all effective divisors A not 
containing P, and an arithmetic part that verifies if A can be represented by a divisor 
with ^ < A < D . Only the first part is considered in this paper. In other words, the 
bounds that we obtain apply to a different and more general problem, that of recovering 
local data at a point P from given local data at a divisor A, for any divisor A with no 
base point at P. We briefly outhne this setting. 
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Definition 3.7. Let X/¥ be a curve, and let C be a divisor on X. For a given point P 
on X define the collection Ep(C) = {tt^ : A > 0} of surjective maps 

-ka ■■ ^{-C -P) — ^ Vl{-C - P)/Vl{A -C-P), A>0. 

The map tta assigns to a difi^erential lu e fl{—C — P) the local information uj modulo 
Q,[A — C — P), in short the local information of u at A. Given that cu e 0(— C — P), 
any sufficiently large amount of local information determines cu uniquely. Indeed, for any 
divisor A of sufficiently large degree, Q{A — C — P) = and tia is a bijection. For a divisor 
A with the weaker property Q{A — C — P) = Q{A — C) , the maps tta = t^a+p agree. In 
that case, the local information of a; at A determines uniquely the local information of 
a; at ^4 + P. If P occurs in the support of A then this means that the local information 
can be determined with increased precision. For secret sharing we assume that the secret 
corresponds to a fixed map TTp. Then the parties that do not know vrp a priori are those 
with L{A) 7^ L{A — P). Among those, the parties that can determine Tip from tta are 
those that satisfy Vl{A -C-P)= n{A - C), or, equivalently, L{A - C) ^ L{A- C - P). 
Together the conditions define the set Tp{C). In this setting, the access structure Tp{C) 
can be analysed without further assumptions on the representation of the maps tta- The 
image under tta of a differential cu e fl{—C — P) might be written out explicitly in terms 
of local parameters and residues, much like an algebraic geometric code, or it might 
simply be given as a differential lj + r] for r] e fl{A — C — P). 

4 Semigroup ideals 

Let X/¥ be a curve over a field F and let Pic(X) be the group of divisor classes. Let 
r — {A : L{A) 7^ 0} be the semigroup of effective divisor classes. For a given point 
P G X, let Fp = {A : L{A) ^ L{A — P)} be the semigroup of effective divisor classes 
with no base point at P. Call A G Fp a P-dcnominator for the divisor class C G Pic(X) 
if A — C G Fp. So that A — {A — C) expresses C as the difference of two effective divisor 
classes without base point at P. The P-denominators for C form the Fp-ideal 

Fp(C) = {AeTp : A-C e Fp}. 

The ideal structure of the semigroup Fp(C) amounts to the property A + E E Fp(C) 
whenever A G Fp(C) and £^ G Fp. The Fp-ideal of P-numerators for C is the ideal 

Fp(-C) ^{AeFp-.A + C e Fp}. 

Clearly, A is a P-denominator for C if and only if A — C is a P— numerator for C, that 
is 

AeFpiC) ^ A-CgFp(-C), 
The minimal degree ^p{C) of a P-denominator for C is defined as 

7p(C) = min{deg A : A G Fp(C)}. 
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The minimal degrees satisfy 



7p(C)-7p(-C) = degC. 

The denominator and numerator terminology is borrowed from the ideal interpretation of 
divisors. Let O be the ring of rational functions in F(X) that are regular outside P. For 
effective divisors A and B disjoint from P, the fractional 0-ideal Ui>oL{iP — {B — A)) = 
JI~^ is the quotient of the integral 0-ideals J = Ui>oL{iP — B) and / = Ui^QL{iP — A). 
To a denominator A of smallest degree corresponds an ideal / of smallest norm. 

If either C G Fp or —C G Fp then the conditions A & Tp and A — C G Fp are 
dependent. 

Proposition 4.1. For a divisor C on a curve X of genus g, '~ip{C) > max{0,degC}. 
Moreover, 

^p[C) = 0^ -CgFp^ Fp(C) = Fp. 
7p(C)=degC ^ CgFp ^ Fp(-C) = Fp. 

The inequality is strict if and only if C, —C ^ Fp only if \ degC| < 2g. 

For suitable choices of the divisor C, the parameter 7p(C) gives a lower bound for 
the coset distance of an algebraic geometric code (Proposition 13.51) and therefore bounds 
for the access structure of an algebraic geometric linear secret sharing scheme (Theorem 
13. 6p . Proposition 14. II shows that we can expect improvements over the trivial lower bound 
7p(C*) > degC that is used for Theorem 13.61 only if P is a base point for the divisor C. 

Let 5* be a finite set of rational points that includes P. For F5 = flpg^Fp, let 
Tp{C] S) = Tp{C) nTs = {A eTs : A-C e Fp}, and let 7p(C; S) be the minimal 
degree for a divisor A G Tp{C; S). 

Lemma 4.2. For a given set of rational points S that includes P, and for extensions of 
algebraic geometric codes Cq{D,G — P)/Cq{D,G) and Cl{D,G)/Cl{D,G — P) defined 
with a divisor D = Pi + ■ ■ ■ + Pn disjoint from S, 

d{GL{D, G)/Cl{D, G-P))> 7p(C; S), for C = D - G, 
d{CniD, G - P)/GniD, G)) > MC; S), for G = G - K - P 

Proof. Proposition 13.51 □ 

To obtain similar estimates for the minimum distance of an algebraic geometric code, 
we use Proposition EH Define the F^-ideals F*(C; S) C F(C; S), 

T\G- S) = {AeTs: L{A - G) ^ L{-G)}, 
F(C; S) = {AeVs:L{A-G)^Q}. 

Let 7*(C; S) (resp. 7(C; S)) denote the minimal degree for a divisor A G F*(C; S) (resp. 
A&T{G,S)). 
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Lemma 4.3. For a given set of rational points S, and for algebraic geometric codes 
Cl{D, G) and Cn{D, G) defined with a divisor D = Pi + ■ ■ ■ + Pn disjoint from S , 

d{CL{D, G)) > 7*(C; S) > 7(C; S), for G = D - G, 
diGn{D, G)) > 7*(C; S) > 7(C; S), forG = G-K. 

ForL{-G)=0, YiG;S) = ^iG; S). 

Proof. Proposition 12.11 □ 

The condition L{—G) = holds in all cases where the Goppa lower bound d > degC 
(Theorem 12.21) is positive. We give lower bounds for 7(6*; 5*) using lower bounds for 
7p(C; S"). With a minor modification, we obtain lower bounds for 7*(C; S). 

Lemma 4.4. Let S be a finite set of rational points. For a divisor G, and for a point 
Pes, 

r(C; S) = rp{G; S) U r(C + P; S). 
r*(C; S) C rp(C; S) U r*{G + P; S). 

Moreover, for —G ETp, 

T*{G; S) C r{G + P;S). 

Proof For the equality, L{A - G) ^ ii and only ii L{A ~ G) ^ L{A - G - P) or 
L{A~G-P)^ 0. For the inclusion, L{A-G) ^ L{-G) only if ^(A-C) ^ L{A-G-P) 
or L{A~G - P) ^ L{-G - P). Finally, for A G r*(C; S) such that -G E Tp, we 
have dim L{A - G)/L{-G - P) > 1, and thus L{A - G ~ P) ^ L{-G - P). So that 
AeT*{G + P;S). □ 

Proposition 4.5. 

7(C; S) > min{7p(C; S),^{G + P; S)}. 
7*(C; S) > min{7p(C; S), 7*(C + P; S)}\{0}. 

Proof In general Y{C;S) > 0. And 7p(C; 5) = only if 7p(C) = if and only if 
—G G Fp, in which case we can omit 'yp{G; S) before taking the minimum. □ 



5 Main theorem 

For a given curve X/¥, let G G Pic(X) be a divisor class and let P be a point on X. For 
the semigroup Tp = {A : L{A) 7^ L{A — P)} and the Fp-ideal 

Tp{G) = {AeTp: A-G eVp], 

define the complement 

Ap(C) = {AeTp : A-G ^ Tp}. 
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Lemma 5.1. 

Ap(C) = ^ Tp{C) = Tp ^ -C eVp. 
Let X be of genus g and let K represent the canonical divisor class. 
Lemma 5.2. In general, 

AeAp{C) ^ K + C + P - Ae Ap{C). 

ForAe Ap{C), 

min{0,degC} < degA < max{2(7 — 1, deg C + 2(7 — 1}. 

Proof. This follows from the definition together with the Riemann-Roch theorem. □ 

The following is the analogue of Theorem 11.21 in the language of divisors. 

Theorem 5.3. (Coset hound for divisors) Let {Ai < A2 < ■ ■ ■ < A^} C Ap(C) he a 
sequence of divisors with Aj+i > Ai + P , for i = 1, . . . , w — 1. Then deg A>w, for every 
divisor A e Vp{C) with support disjoint from A^ — Ai, that is 

-ip{C-A^-A{) > w. 

Proof. After replacing the sequence with an equivalent sequence if necessary, we may 
assume that Ai, A2, . . . , A^j are disjoint from A. We obtain two sequences of subspaces. 

L{AJ D L{A^ - P) D L{A^_^) D - P) D • • • 

■■■D L{A2) 2 L{A2 - P) ^ L{Ai) 2 L{Ai - P). 

n{Ay, - c) c n{A^ - c - p) c n{A^_i - c) c n{A^_i - c - p) c • • ■ 

■ ■ ■ C Q{A2 -C)C Q{A2 -C-P)C Q{Ai -C)C Q{Ai -C-P). 

For i = 1,2, . . . ,w, choose 

fi e L{A,)\L{Ai - P) and r]i e n{Ai -C- P)\fi(A: - C). 

Let A G Fp be of degree degA < w. Then there exists a linear combination / of 
fiif2i---ifw that vanishes on A. If fi is the leading function in the linear combina- 
tion then / e L{Ai - A)\L{Ai - A-P) and /r/^ G ^](-C - P + A)\Vt{-C + A). Thus 
A-C ^Vp and A^ Fp(C). □ 

For a divisor B, let 

Ap(P, C) = {P + zP : z G Z} n Ap{C), 

= {B + iP eVp,B -C + iP ^ Fp}. 



12 



Lemma 5.4. To the set Ap{B,C) corresponds a dual set 

Ap{B - C, -C) = {B - C + iP : i e Z} n Ap(-C), 
= {B -C + iP eTp,B + tP ^ Tp}, 



such that #Ap(5, C) - #Ap{B - C, -C) = degC. Furthermore, 

#Ap(B,C) 

In particular, 



degC, zfCeTp. 
0, if-CeTp. 



#Ap(i?,C) 



degC, tfdegC>2g. 
0, tfdegC<-2g. 



Proof. For iq large enough, 



#Ap(i?,C)-#Ap(i?-C,-C) 
= i^{i<iQ: B + iP eVp.B -C + iP ^ Vp} 

-if{i<to: B + iP ^Tp,B-C + tP e Tp} 

= J2^l{B + iP) - 1{B + iP- P)) - {1{B -C + iP)-l{B-C + iP~ P)) 

i<io 

= dim L{B + i^P) - dim L{B -C + iqP) = deg C. 

For the remainder use Lemma 15.11 □ 

Corollary 5.5. For any choice of divisor B, there is a pair of equivalent bounds 

7P(C) > #Ap(5, C). 7p(-C) > #Ap(B - C, -C). 

Proof. For the first inequality, the elements Ai, A2, . . . , G Ap{B,C), ordered from 
lowest to highest degree, meet the conditions of the theorem. Similar for the second 
inequality. Equivalence follows from 7p(C) — 7p(— C) = degC and the previous lemma. 

□ 

Lemma 5.6. If A e Tp{E) and E G rp(C) then A G rp(C). For E G rp(C), 

Ap(C) C ApiE). 

Proof. The first claim is immediate from the definitions, in particular A — E & Tp and 
^ - C G Fp implies A - C e Tp. For E e Tp{C), the first claim shows that A ^ Tp{E) 
whenever A ^ Fp(C). □ 
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6 Order bound and floor bound 

We unify and improve two known lower bounds for the minimum distance of an algebraic 
geometric code. Let S* be a given set of rational points, and let Cl{D, G) and Cn{D, G) 
be algebraic geometric codes defined with a divisor D = Pi + ■ ■ ■ + Pn disjoint from S. 
With Lemma [4. 3 [ 

d{CL{D,G))>-f*{C;S), for C = D-G, 
d{Cn{D,G))>^*{C;S), for C = G-K. 

Proposition 6.1. For points Qo, . . . , Qr-i € S , define divisors Cq < Ci < ■ ■ ■ < Cr such 
that Co = C and Cj+i = Cj + Qi, for i = 0, . . . ,r — 2. Then 

7*(C; S) > min{7Qo(Co; 5), 7q.(Ci; 5), . . . , 7Q.-.(a-i; 5), 7*(a; S)}\{0}, 
In general, 7*(C.r; S) > degC + r. 

Proof. Proposition 113] gives 7*(Ci; S) > min{7Q^(Ci; 5),7*(a+i; ^)}\{0}. □ 

We give a formulation of the order bound for an algebraic geometric code Cq{D, G). 
For the case that G is supported in two points, a similar result formulated in terms of 
near order functions can be found in |CMdST07l Theorem 1]. 



Theorem 6.2. (Order hound Bee07, Theorem 7j) Let C be an algebraic curve and G 
a rational divisor. Let V be a set of rational points not occuring in the support of the 
divisor G. Then we have 

d{Cp{G)) > dv{G) > d{G). 

Using |Bee07l Remark 5, Definition 6], we expand the theorem in the notation of the 
current paper. In comparison with the original theorem, we have removed the condition 
that the divisors Bq, . . . ,Br are disjoint from D. 

Theorem 6.3. (Order bound {BeeOT^ ) Let Cn{D, G) be an algebraic geometric code, and 
let G = K + G. For a sequence of points Qo, . . . , Qr-i disjoint from D, let Go = G and 
Gi+i = Gi + Qi, for i = 0, . . . ,r - 2. 

Co = GniD, K + G)DCi = GniD, K + Gi) ^ ■ ■ ■ ^ C, = GniD, K + C,). 

If Ci 7^ Ci+i then a word in Cj\C.j+i has weight w > #Aq^(0, Gi). For r large enough, 

d{Gn{D,G)) > min{#AQ,^(0,a) : C, ^ C,+i}. 

Moreover, for a sequence of divisors Bo, . . . , -Br-i? 

d{Gn{D,G)) > min{#AQ,(i?„a) : ^ C+J. 
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Proof. The order bound for the minimum distance combines Proposition 16.11 with the 
estimates '^qXCi', S) > IgXCi) > ^qX^i, Q) in Corollary [521 □ 

We analyse the choice of the points Qq, Qi, . . . , Qr- In |Bee07] . the choice of the points 
is unrestricted, and an example is given where the optimal lower bound is obtained with a 
choice of Qi outside G. On the other hand, Proposition 14 . 1 1 shows that 7Qi(Cj) > degCj. 
Thus, we may assume that the minimum min{7Q.(Cj)}\{0} is taken over an interval 
i = 0, 1, . . . ,r such that, for all i in the interval, either 7Qi(Cj) = or ^Qi[Ci) > degCj. 
With Proposition 14.11 this implies that either —Ci G Tq- or Ci ^ Tq-. In both cases, 
we can conclude, for Ci ^ 0, that Ci ^ Fq-, i.e. that L{C^ = L{Ci — Qi). The same 
conclusion can be reached with Lemma [5.41 if the argument is repeated for AQ-{Bi,Ci) 
instead of 7Qi(Ci). The following stronger result holds. 

Proposition 6.4. The maximum in the order bound is attained for a choice of points 
Qo, Qi, . . . , Qr-i such that, for i = 0,1, . . . ,r — 1, either Ci = 0, or Qi, . . . , Qr-i are base 
points of the divisor Ci. In particular, if Ci is a nonzero effective divisor, we may restrict 
the choice for Qi, . . . , Qr-i to points in the support of Ci. 

Proof. For Q G {Qi, . . . , Qr-i}, let j be minimal in {i, . . . ,r — 1} such that Qj = Q. If 
Cj 7^ 0, we may assume as explained above, that Cj ^ Tq. With E = Qi + - ■ ■ + Qj-i G Tq 
and Cj = Ci + E it follows that Cj ^ Tq. If Cj = then either i = j, in which case 
Ci = 0, or i < j, in which case deg Cj < and Ci ^ Tq. □ 

In |Bee07| Example 8], the minimum distance lower bound for a code C^{D,5P) 
on the Klein curve is improved with a choice Qo = P,Qi = Q ^ P. For the example, 
5P = K + 2P-Q and6P = K + Q + R, so that Co = 2P - Q and Ci = Q + R. Indeed, 
with the proposition, we can expect improvements only with Qi = Q or with Qi = R. 

To improve the order bound we apply the main theorem with a different format for 
the divisors Ai, . . . , A^. Let 

Ap(< B,C) = {B + iP eTp-. B - C -iP ^Tp A i<0}, 
Ap{> B + P,C) = {B + iP eTp-. B - C -iP ^Tp A i>l}, 

be a partition of the set Ap(i?, C) into divisors of small and large degree. 
Lemma 6.5. 

#Ap(< B,C) = dim L{B) - dim L{B - C) + #Ap(< B-C, -C). 
Proof. Similar to the proof of Lemma [5. 4[ but use io = 0. □ 

Theorem 6.6. (ABZ bound for cosets) Let C be a divisor and let P be a point. For 
G = K + C = A + B + Z, Z >0, 

7P(C; ZUP)> #Ap(< A, C) + #Ap(< B, C). 
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Proof. With Lemma [E2l a divisor A' G Ap(C) if and only ii K + C + P - A' e Ap{C). 
And A' < A if and only ii K + C + P - A' > K + C + P ~ A = B + P + Z. The elements 
Ai,A2,...,A^ e Ap(< B, C) U Ap(> B + P + Z,C), ordered from lowest to highest 
degree, meet the conditions of Theorem [531 withw = #Ap(< A,C) + 4^Ap{< B,C). □ 

The lower bound #Ap(S, C) that is used for the order bound takes into account only 
the number of divisors in a delta set Ap{B,C). The improved bounds in Theorem 16.61 
are possible by considering also the degree distribution of divisors in the delta set. For 
Z = 0, the bounds in the theorem include those used in the order bound (Theorem 16. 3p . 
The floor bound (Theorem 12. 3p sometimes exceeds the order bound. The ABZ bound 
for codes (Theorem 12. 4p gives an improvement and generalization of the floor bound. 
We show that the bounds in the theorem not only include those obtained with the order 
bound but also those obtained with the ABZ bound for codes. In each case, the coset 
decoding procedure in the appendix decodes efficiently up to half the bound. 

Theorem 6.7. (ABZ bound for codes) Let G = K+C = A+B+Z, for Z > 0. For D with 
DnZ = (l}, a nonzero word in Cn{D,G) has weight w > 1{A) -1{A-C) +1{B) -1{B -C). 

Proof. Let P be a point on the curve not in the support of Z^, if necessary it can be 
chosen over an extension field. We use Proposition 16. II with S = Z U P and Qo = Qi = 

. . . = Qr-l = P. 

7*(C; S) > min{7p(C; 5), 7p(C + P; 5), . . . , MC + (r - 1)P; S)n*iC + rP; S)}\{0}. 

Now use Theorem MM with K + C + iP = A + B + {Z + iP), 

7P(C + zP; S) > #Ap(< A,C + iP) + #Ap(< P, C + iP). 

With Lemma [6.51 

7p(C + zP; S) > 1{A) -1{A-C- iP) + /(P) - 1{B - C - iP) 
> 1{A) - 1{A -C) + 1{B) - 1{B - C). 

Hence, by taking r large enough, Y{C; S) > 1{A) - 1{A ~ C) + 1{B) - 1{B - C). □ 

Neither the ABZ bound for codes, nor the ABZ bound for cosets gives an improve- 
ment in general. For Z = 0, both bounds return previously known bounds, namely the 
Goppa bound and the order bound, respectively. For carefully chosen nontrivial Z, there 
are possible improvements. If we apply Lemma [6.51 with both A and P, 

#Ap(< A,C) = dimL(A) -dimL(A-C) + #Ap(< A-C, -C), 
#Ap(< P,C) = dim L(P) - dimL(P - C) + #Ap(< P - C, -C), 

and add the two equations, then we see that the improvement of the ABZ coset bound 
applied to G = K+C = A+B + Z over the fioor bound applied to G = K+C = A+B+Z 
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is given by the ABZ coset bound applied to the dual decomposition G' = K — C = 
{A — C) + {B — C) + Z. For Z = 0, we recover that the improvement of the order bound 
applied to G = K + C over the Goppa bound deg C is given by the order bound applied 
to G' = K - C (Lemma [531 and Corollary [53]) . 

We consider the special case of the order bound with Bq = ■ ■ ■ = B^-i = and 
Qo = ■ ■ ■ = Qr-i = P- For codes of the form Cl{D, pP)^ = C^{D,pP) or of the form 
Cl{D,K + P + pP)^ = Cq{D,K + P + pP) the resulting bound can be formulated 
entirely in terms of the numerical semigroup S of Weierstrass P-nongaps. For the first 
code use C = pP — K, and for the second C = pP + P. For the delta sets we obtain 

pP e Ap{pP -K) ^ pP eVp AK + pP - pP ^ Tp. 

^ p e S A p - p + 1 e S, 

pP e Ap{pP) ^ pP ETp ApP - pP - P ^Tp. 

4^ peSAp-p-l^S. 

The first of the two bounds in the following theorem is the Feng-Rao bound [FR93j . 
[CFMOOj . The second bound is different when the canonical divisor K ^ {2g — 2)P. 

Theorem 6.8. (Feng-Rao bound) Let S be the semigroup of Weierstrass P-nongaps. 

d{CL{D,pP)^) > min{#A[p'] : p' > p}\{0}, 

where A[p] = {p E S\p — p E S}. 

d{CL{D, K + pP)^) > min{#S[p'] : p' > p}\{0}, 

where B[p] = {p E S\p — p ^ S}. 

Proof. Apply Proposition 16.11 with the given delta sets. □ 

7 Delta sets 

For a divisor C and a point P, we defined the Fp-ideal rp{C) = {A ETp : A — C E Tp}. 
Theorem 15.31 gives a lower bound for deg A, for A E rp{C), in terms of the complement 
Ap{C) = {A E Tp : A — C ^ Tp}. Theorem 16.31 and Theorem l6.6l are formulated in terms 
of the subsets Ap{B,C) and Ap(< B,C), respectively, for a suitable choice of divisor 
B. The computation of optimal lower bounds requires either a complete description 
of the delta set (for the main theorem) or at least a description from which the size 
of the sets Ap{B,G) or Ap(< B,C) can be computed (for the other two theorems). 
We collect some straightforward relations that can be used to construct delta sets, to 
compare delta sets, or to compare sizes of delta sets. Most relations come in pairs such 
that A E Ap{C) (i.e., A E Tp,A - C ^ Tp) corresponds to A - C E Ap(-C) (i.e., 
A ^ Tp,A — C E Tp). The proofs in this section are entirely straightforward, in most 
cases applying the definition of Ap(C) is enough, and no proofs are included. In general, 
ioY E E Tp, Ap(C) C Ap{C -\- E). Lemma [7?T] gives a precise version and its dual. 
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Lemma 7.1. Let C be a divisor and P a point. For E G Tp, 
A e Ap{C) 

^ AeAp{C + E) A A + E e Ap{C + E). 

A-C-Ee Ap{-C-E) 

^ A-C-EeAp{-C) A A~C e Ap{-C). 
For the four relations on the right we describe when the reverse implication fails. 
Lemma 7.2. 

AeAp{C + E) A A^Ap{C), 

^ AeAp{C + E) A A + E ^ Ap{C + E), 
^ Ae Ap{C + E) A A-C eVp, 
^ A-C e Ap{E) A AeTp. 

A-C e Ap{-C) A A-C-E^ Ap{-C - E), 

^ A-CeAp{-C) A A-C - E ^ Ap{-C), 
^ A-CeAp{-C) A A-C-E^r, 
^ A-C e Ap{E) A A^Tp. 
The second group follows with a substitution A\—>-A — C — E,C^ —C — E. 
Lemma 7.3. 

A-C-Ee Ap{-C) A A-C-E^ Ap{-C - E), 
^ A-C-EeAp{-C) A A-C ^ Ap{-C), 
^ A-C-Ee Ap{-C) A AeTp, 
^ Ae Ap{E) A A-C - E eTp. 

A G Ap{C + E) A A-E ^ Ap{C), 

^ AeAp{C + E) A A- E ^ Ap{C + E), 
^ AeAp{C + E) A A-E^V, 
^ AeAp{E) A A-C - E ^Tp. 

As in Section [5l let 

Ap{B, C) = {B + tP -.t ezjn Ap(C), 

= {B + 'iP eTp,B -C + iP ^ Tp}. 

Furthermore, let 

B + iP eAp{C)}, 
B + iP eTp,B -C + iP ^ Tp}. 
B-C + iPe Ap(-C)}, 
B -C + tP eTp,B + iP ^ Tp}. 



Ip{B,C) = {ieZ 
= {ieZ 

rp{B,C) = {ieZ 
= {iez 
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So that rp{B, C) = Ip{B- C, -C), and #/p(5, C) - i^PpiB, C) = degC (Lemma [El • 
We rephrase some of the previous relations. 

Lemma 7.4. 

Ip{B, C) = Ip{B, C + E)n Ip{B + E,C + E). 

ppiB, c + E) = rp{B -E,c)n rp{B, c). 

Lemma 7.5. 

i e Ip{B,C + E)\Ip{B + E,C + E) ^ i e Ip{B -C,E) A B + iPeTp, 

i e Ip{B,C + E)\Ip{B - E,C + E) ^ teIp{B,E) A B -C + E + iP ^Vp. 

Proposition 7.6. 

Jp(5, C + E)\Ip{B, C) U r{B, C)\r{B, C + E) = Ip{B -C,E). 
Ip{B, C + E)\Ip{B -E,C)U r{B - E, C)\/p(5, C + E) = Ip{B, E). 

We describe the first partition for the following choice of divisors. For divisors Bq 
and Co of degree zero, and for a point Q, let B = Bq, C = Cq — 2gQ, E = igQ. Then 

/p(So, Co + 2gQ) U /p(5o - Cq + 2gQ, -Cq + 2gQ) = /p(Bo - Cq + 2gQ, AgQ). 

In general, 

{0, . . . , 2(7 - 1} C Ip{Bo - Co + 2gQ, AgQ) C {-2(7, . . . , 4(7 - 1}. 

The first inclusion follows with the definition of Ip{B,C). For the second inclusion. 
Lemma [5.21 gives < i + 2g < Qg — 1. 

Proposition 7.7. Let Bq and Cq be divisor classes of degree zero. Define partitions 
{-2(7, . . . , -1} = iVi U Gi, {0, . . . , 2(7 - 1} = iV2 U G2, and {2g, 1} = iVg U G3, 
such that 

keNi ^ Bo-Co + 2gQ + kP e Fp, 

keN2 ^ Bo + kP e Fp, 

keNs ^ Bo-Co-2gQ + kP eVp. 

Then = = g, for i = 1,2, 3. Moreover 

Ip{Bo, Co + 2gQ) = N^VJ C^ and Ip{Bo - Co + 2gQ, -Co + 2gQ) = N,U G2. 
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Proof. 

{ 

{k: Bo + kP eVp A 

Bo -Co- 2gQ + kP E Tp} 
{k: Bo + kP eTp A 

Bo -Co- 2gQ + kP ^ Tp} 
{k: Bo + kP ^Tp A 

Bo-Co + 2gQ + kP eVp} 
{k: Bo + kP^TpA 

Bo-Co + 2gQ + kP ^Tp} 



8 Discrepancies 

We continue the description of a delta set Ap(C) in terms of other known delta sets. The 
results in the previous section show that differences between similar delta sets, such as 
Ap{C + E) and Ap(C), for E E Tp, can be described in terms of the delta set Ap{E). 
In this section, we refine the results for the special case that E = Q is a. point different 
from P. 

Lemma 8.1. For distinct points P and Q, Ap{Q) = Aq{P). 
Proof. 

A G Ap{Q) ^ L{A) ^ L{A - P) A L{A - Q) = L{A - Q - P) 

^ L{A)^L{A-Q) A L{A- P) = L{A- P -Q) ^ AeAq{P). 

□ 

Let D{P, Q) = Ap{Q) = Aq{P). We call a divisor A E D{P,Q) a discrepancy for the 
points P and Q. 

Lemma 8.2. A divisor A E D{P, Q) is of degree < degA < 2g. The cases degA = 
and degA = 2g correspond to unique divisor classes A = and A = K + P + Q, 
respectively. Furthermore, 

AeD{P,Q) ^ K + P + Q-AeD{P,Q). 

Proof. Use Lemma [5. 2 [ □ 

The set Ap{B, Q) is defined as {B + kP : /c G Z} fl Ap{Q). It follows from Lemma 
15.41 that Ap{B,Q) is a singleton set. For a divisor B, and for a given choice of distinct 
points P and Q, define 

BQ = ApiB,Q), Bp = Aq{B,P). 



-2^,...,-!} {0,...,2^-l} {2g,...Ag-l} 
- - Ns 



N2 
G2 



G, 



□ 
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Lemma 8.3. 

A e D{P, Q) ^ A = Aq ^ A = Ap. 

Proof. Clear after writing Aq = Ap{A, Q) and Ap = Aq{A,P). □ 

Lemma 8.4. For distinct points P and Q, and for a divisor B, Bq = Ap{B,Q) = 
B + kP, for k minimal such that L{B + kP) ^ L[B + kP — Q). For a general k, 
B + kP eTq zf and only zf B + kP > Bq. 



Proof. 



B + kPEAp{Q) ^ B + kPEAQ{P) 

^ B + kPeTQ A B + {k-l)P ^Tc 



For distinct points P and Q, and for a divisor B, let 

Db{P,Q) = {B + iP + jQ ■.i,je Z}nD{P,Q), 
and define functions a = aB,T = tb '■ — ^ ^ such that 



□ 



B + iP + jQ eVp ^ j> 

B + iP + jQ eVq <^ i> t{j). 



With the lemma, 



{B + iP)p = Aq{B + iP,P)=B + iP + (T(i)Q. 
{B + jQ)q = Ap{B + j-g, Q)=B + r{j)P + jQ. 

Theorem 8.5. For a divisor B, 

Db{P, Q) = {B + iP + a{{}Q ■.ieZ} = {B + t{j)P + jQ : j G Z}. 

In particular, the functions a = ap and t = Tp are mutual inverses and describe permu- 
tations of the integers. For a divisor B of degree zero, and for i E Z, —i < cr{i), T{i) < 
2g — i. Formsuch thatmP r^mQ, the functions i-\-a{i), j -\-T{j) only depend on i, j mod- 
ulo m. The functions a, t are determined by their images on a full set of representatives 
for Z/mZ. 

Proof. For the second claim use Lemma [8^ Finally, B + iP+jQ G D{P, Q) only depends 
on the divisor class oi B + iP + jQ and therefore 

B + iP + jQeD{P,Q) ^ B + {i + m)P + {j -m)Q e D{P,Q), 

so that a(i + m) = a(i) — m. □ 
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The discrepancies Db{P,Q) serve as an index set for a common basis of the vector 
spaces L{B + aP + bQ), for a,b E Z. 

Theorem 8.6. 

dimL{B + aP + bQ) = i^{B + iP + jQ E D{P,Q) ■.i<aAj<b}. 

Proof, dim L{B + aP + bQ) ^ dim L{B + aP + bQ-P) if and only if B + aP + bQ eTp if 
and only if B + aP + bQ > {B + aP)p G Db{P, Q) if and only if there exists B + iP+jP e 
Db{P, Q) with i = a, j < b. Use induction on a to complete the proof. □ 

Theorem 8.7. For given distinct points P and Q, and for divisors A and C , 
A G Ap(C + Q) ^ Ap<A<{A~C)p + C. 

Moreover, 

Ap = A<{A-C)p + C ^ Ae^p{C + Q) A A-Q ^ ^p{C + Q). 
Ap<A={A-C)p + C ^ Ae/\p{C + Q) A A + g^Ap(C + g), 

^ Ae^p{C + Q) A A^Ap(C). 

Proof. With Lemma[83l AeVpii and only ii A> Ap, and A-C -Q ^Tpii and only 
a A — C < {A — C)p. The last claims use Lemma [7.31 (part two) and Lemma [7.21 (part 
one), respectively. □ 

Note that the divisors Ap, A, and {A — C)p + have the same multiplicities at 
any point other than Q. Let Bq and Cq be divisors of degree zero, and let cr = cr^o and 
a' = (Tbo^Co- 
Corollary 8.8. 

Bo + kP + eQe Ap(Co + iP + jQ + Q). 

^ k + a{k) < k + £ < {k - i) + a'{k - i) + i + j. 
^ (y{k) < i < a'{k-i) +j. 

Proof For A = Bq + kP + iQ, Ap = Bq + kP + a{k)Q. For C = Cq + iP + jQ, 
{A — C) p = Bq — Cq + {k — i)P + a'{k — i)Q. Now use the theorem, and compare either 
the degrees of the divisors Ap, A, and [A — C)p + C, or their multiplicities at Q. □ 

Let r and r' be the inverse functions for cr = ap,, and cr' = (Jbo-Coi respectively. Let 

dp{k) = deg{Bo + kP)p = k + a{k), 
dQ{i) = deg{Bo + eQ)Q = T{i)+e. 

d'p{k -i) = deg(So - Co + (A; - i)P)p = k-i + a\k - i), 
d'Qii - j) = deg(5o -Co + {i- j)Q)q = t\1 J. 

For mP ~ mQ, the functions dp, dq and d'p, d'q are defined modulo m. 
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Proposition 8.9. Let A = Bq + kP + iQ, and let C = Co + iP + jQ + Q. 

Ap = A<{A-C)p + C 

^ k = k+ = r(£) A e-3 < a'{k+ - i). 

^ k = k+ = dgie) -£ A dqie) < dp{k+ -i)+i+3. 

Ap<A = {A-C)p + C 

^ k = k' = T'{i A a{k-) < i. 

^ k = k- = d'Q{i-j)-i + t+j A dpik') <d'Q{£-j)+t+j. 

We use the proposition to create tables for eacli of tlie tliree equivalences in Tlieorem 
18.71 The tables and K are used to compute the size of a delta set or to construct a delta 
set, respectively (Example 19.111) . The tables A^"*" and are used in the optimization of 
the order bound (Example 110. 5p . The tables and K~ provide more information that 
can be used for further improvements with the ABZ bound (Example 110.61) . In all cases, 
let A = Bo + kP + iQ, and let C = Co + iP + jQ + Q. 

Ap < A = {A-C)p + C ^ Ae Ap{C + Q) A A^ Ap(C). 

1 if a{k)<i 
if a{k) > £ 

The table Ni{i,j) indicates whether there exists A G Ap{Bo + iQ,Co + iP + jQ + 
Q)\Ap{Bo + iQ, Cq + iP + jQ). In the affirmative case (N=l), the table Ki{i,j) gives 
the unique value of k such that A = Bo + kP + iQ. The table is sufficient for computing 
the size of a delta set, the table K moreover provides the elements of a delta set. 

Ap = A<{A-C)p + C ^ Ae Ap{C + Q) A A-Q^ Ap{C + Q). 

1 ifa'{k-i)>i-j 
if(T'{k-i) <i-j 

The table N^{j, i) indicates whether there exists A G Ap{Bo + iQ, Cq + iP + jQ + Q) 
with A-Q ^ Ap{Bo + iQ - Q,Co + iP + jQ). In the affirmative case (N=l), the table 
K^{j,i) gives the unique value of k such that A = Bq + kP + iQ. The table A^"*" is 
sufficient for comparing the sizes of two delta sets, the table moreover provides the 
elements for the difference in one direction. 

Ap<A = {A-C)p + C ^ Ae Ap{C + Q) A A + Q^ Ap{C + Q). 

1 ifa{k)<i 
if a{k) > i 

The table N~{j, i) indicates whether there exists A G Ap{Bo + iQ, Cq + iP + jQ + Q) 
with A + Q ^ Ap{Bo + iQ + Q,Co + iP + jQ + Q). In the affirmative case (N=l), the 
table K^{j, i) gives the unique value of k such that A = Bq + kP + iQ. The table A^ is 
sufficient for comparing the sizes of two delta sets, the table K moreover provides the 
elements in the difference. 



Kt{j,i)=T{i), Nt{3,i) 



K-{j,i) = T'ii-j)+t, Nr{jJ) 
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9 Hermitian curves 



Let X be the Hermitian curve over ¥q2 defined by the equation y'^ + y = x'^^^ . The curve 
has + 1 rational points and genus g = q{q — l)/2. Let P and Q be two distinct rational 
points. We will give a description of the set 

DoiP, Q) = D{P, Q) n {tP + jQ ■.t,je Z}. 

We use this description to determine lower bounds for 7p(C), for C G {iP+jQ : i,j G Z}. 
The only property of the two rational points that we use is that lines intersect the pair 
(P, Q) with one of the multiplicities 

(0,0) (0,1) (0,g+l) 
(1,0) (1,1) 

(g + 1,0) 

The curve is a smooth plane curve and if H is the intersection divisor of a line then 
K = {q — 2)H represents the canonical class. We have if ~ (g + 1)P ~ {q + 1)Q and 
m{P — Q) is principal for m = q + 1. 

Proposition 9.1. The m inequivalent divisor classes in Do{P, Q) are represented by the 
divisors 

dH — dP — dQ, for d = 0,1, . . . ,q. 

Proof. Since m = g + 1 is minimal such that mP ~ niQ, the divisors are inequivalent. As 
multiples oi H — P ~Q G Tp, each of the divisors dH — dP — dQ G Fp, for d = 0,1, . . . ,q. 
A divisor A G Fp is a discrepancy if and only if K + P + Q — A G Fp. Now use 
K + P + Q = {q-2)H + P + Q = q{H -P-Q). □ 

The function y has divisor y = (g+l)(Po— -Poo), where Pq = (0, 0) and Poo = (0:1:0). 
Moreover L{H - Pq - Poo) = {x). 

Corollary 9.2. The ring O of functions that are regular outside Pq and Poo has a basis 
{ x'^y^ I < z < g, j G Z ) as vector space over Fg2. 

Proof. Theorem 18. 6[ □ 
Lemma 9.3. Let C = dH - aP - bQ, for < a < q,0 < b < q + 1. 

CeTp d>aord = a>b. 

Proof. We use Lemma [8.41 together with Proposition 19. 1[ We may assume H = {q + 1)Q- 
Then, dH — aP — bQ ^Tp if and only if dH — aP — bQ > aH — aP — aQ if and only if 
d>aoid = a>b. □ 
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Proposition 9.4. Let C = dH - aP - bQ, forO <a,b < q. The set Ap{-C) = {A e 
Tp : A + C ^Tp} contains the following elements 

{q — 1 — d — r)H — {q — (i)P-i for d < d + r < a. 

sH, for d < d + s < a. 

sH — {d + s — a)P for d<a<d + s<b. 

Proof. With the lemma, A = (g — 1— (i — r)H — {q — a)P G Fp for q — a<q— 1 — d — r, 
and A + C = {q-1- r)H - qP -bQ ^Tp for r > 0. Clearly, A = sH eVp for s > 0, 
and A + C = {d + s)H-aP~bQ ^ Tp for a> d + s. Finally, A = sH-{d + s-a)P G Fp 
for < + s - a < s, and A + C = {d + s)H - {d + s)P - bQ ^ Tp for b > d + s. □ 

Lemma 9.5. Let < a,b < q. There exists a form of degree d that intersects the curve 
in {P, Q) with precise multiplicities (a, b) if and only if < a,b < d. 



Proof. Such a curve exists if and only if dH — aP — bQ G Fp fl Fg. With Lemma [9.3[ the 
latter holds if and only < a,b, < d. □ 

Lemma 9.6. For d > 0, let C be a divisor with dH — dP — dQ < C < dH. Then C has 
no base points and 'yp{C) = degC. 

Proof. Since C is equivalent to an effective divisor with support in P and Q, those two 
points are the only candidates for the base points. With Lemma 1931 C G Fp fl Fg, and 
therefore neither P nor Q is a base point. The last claim uses Proposition 14.11 □ 

Proposition 9.7. Let 

C = dH - aP -bQ, for d e Z,0 < a,b < g, 
A = jH + i{H - P), forjeZ,0<i<q. 

Then A G Ap(C) if and only if 

'0 <j < (d-a + q-l), zfO<i<a-b 

< j < {d - a + q - 2), ifa-b<i<a 

< j < (d - a - I), ifa<i<a-b + q + l 

.0 < j < {d- a-2), zfa-b + q + l<i<q 

Proof. For A — C we write 

{j + i-d+ l)H -{i-a)P -{q + l- b)Q, if z - a > 0. 
{j + i-d + 2)H - {i - a + q + 1)P - {q + 1 - b)Q, if i - a < 0. 



With Lemma [931 A - C ^ Fp if and only if 

j < d — a — 1, or j = d — a — l,i — a < q + 1 — b, ifz — a>0. 
j<d — a — 1+q or j = d — a— l + q,i — a< —b, if z — a < 0. 

In combination with A G Fp if and only if j > 0, this proves the claim. □ 
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Corollary 9.8. Let C = dH ~ aP - bQ, forO <a,b< q. 
For a — d < 0, 

Ap(-C) = 0, #Ap(0,C) = dega 

For 0<a — d<q — 1, 

#Ap(0, C) = a{q - 1 - a + d) + max{0, a - b}. 
#Ap(0, -C) = {q+l-a){a-d)+ max{0, b - a}. 

For a — d > q — 1, 

Ap(C) = 0, #Ap(0,-C) = -dega 

Theorem 9.9. Let C = dH - aP - bQ, for d e Z, and forO<a,b< q. Then 

(Case 1 : a,b < d) 7p(C) = 7q(C) = degC. 

(Case 2a : b < d < a) ipiC) > degC + a - d. 

(Case 2b : a < < 6) 7q(C) > deg C + 6 - rf. 

(Case 3a : d < a <b,a < q) ipiC) > deg C + a — + 6 — (i. 

(Case 3b : d <b < a,b < q) 7q(C) > degC + a - d + b - d. 

(Case 4: d<a = 6 = g) 7p(C) = ^q{C) > degC + q-d. 

Proof. (Case 1) uses Lemma 1931 The lower bounds follow from Proposition 19.41 by using 
7p(C) = degC + 7p(— C). Or we can obtain the lower bounds from Corollary 19.81 in 
combination with 7p(C) > 7^Ap(0, C) (Corollary 15. 5p . For 0<a — d<q~l, 

#Ap^(0,C) = a{q-l-a + d) +max{0,a-6}. 

(Case 2a: b < d < a) a{q — l — a + d) + a — b — d{q — 1) + b — d = {a — d){q — a) > 0. 

(Case 3a : d < a < b) a{q — 1 — a + c/) + — d{q — 1) = (a — c?)(g — 1 — a) > 0. 

(Case A : d <a = b = q) q{d- I) = d{q + l) - q - q + {q- d). □ 

Theorem 9.10. For G = K + C , and for D r\ S = ^, the algebraic geometric code 
Cq{D, G) has minimum distance d > 7(C; S). Let C = dH — aP — bQ, for d E Z, and 
for < a,b < q. Then 

(Case 1 : a,b < d) -f{C) > degC. 

(Case 2a : b < d < a) -^{C; P) > degC + a-d. 

(Case 2h : a<d<b) 7(C; Q) > degC + b-d. 

(Case 3a : d< a<b,a < q) 7(C; P,Q) > degC + a - d + b - d. 

(Case 3b : d<b<a,b<q) jIC; P,Q) > degC + a - d + b ~ d. 

(Case 4: d < a = b = q) 7(C; P) = ^{C; Q) > degC + q - d. 

Proof. Use the order bound with 

(Case 2a: b < d < a) Qq = . . . = Qa-d-i = P- 

(Case 3a : d < a <b) Qq = . . . = Qa-d~i = P, Qa-d = ... = Qa-d+b-d-i = Q- 

(Case 4: d<a = b = q)Qo = ... = Qq-d-i = P- □ 
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The following example illustrates the use of the tables Kf {i,i) and Ni{i,j) for con- 
structing a delta set Ap{iQ,iP + jQ + Q) (Proposition I8.9p . In this case, the functions 
dp = dq = d'p = d'q all agree and we can omit the index. 

Example 9.11. For the Hermitian curve of degree four, the genus g = 3. The discrepan- 
cies Do{P, Q) are represented by the divisors 0, H - P - Q,2H ~2P - 2Q, 3H-3P- 3Q. 
In particular, d{k) = 0, 2, 4, 6, for k = 0, —1, —2, —3 modulo 4, respectively. 
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The value for k = d{i — j) — i + i + j- Row (K) gives the difference Ap{iQ, iP + jQ + 
Q)\Ap{iQ,iP + jQ) = {kP + £Q} nTp, with empty intersection if and only if k appears 
in parentheses. Row (N) has the decision whether the difference is empty (N=0) or 
nonempty (N=l). As a special case, we see that Ap(0,P + 2Q) = {0, 3P, 6P, 4P}. The 
numbers in parentheses illustrate the duality in Proposition 17. 7[ 

Ap(0, P + sg) = + {0, 3P, 6P, 4P, 7P, lOP}, 

Ap(-P + 7Q, -P + 7Q) = (-P + 7Q) + {-4P, -P, 2P, -3P, P, 5P}. 
With -P + 7g ~ 7P - g, 

Ap(-g, -p + 7g) = {3P - g, 6P - g, 9p - g, 4p - g, sp - g, 9p - g}. 

The partition of the interval {—2g, . . . ,4(yf — 1} in Proposition 17.71 is given by 

iV3 = {8,9,ll} 
iV2 = {0,3,4} G3 = {6,7,10} 
iVi = {-4,-3,-l} G2 = {1,2,5} 
Gi = {-6,-5,-2} 

10 Suzuki curves 

The Suzuki curve over the field of g = 2gQ elements is defined by the equation y'^ + y = 
xl{x'^ + x). The curve has g^ + 1 rational points and genus g = qo{q — l). The semigroup of 
Weierstrass nongaps at a rational point is generated by {q, q + qo, g + 2go, '? + 2go + l}- For 
any two rational points P and Q there exists a function with divisor (g + 2go + l)(-P~g)• 
Let m = g + 2go + l = + + <lo'^, and let H be the divisor class containing mP ~ mQ. 
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The divisor H is very ample and gives an embedding of the Suzuki curve in as a smooth 
curve of degree m. The canonical divisor K ~ 2(go — 1)H. A hyperplane H intersects 
{P,Q) with one of the following multiplicities. 

(0,0) (0,1) (0,go + l) (0,2go + l) (0,q + 2qo + l) 

(1:0) (1,1) (l,go + l) (l,2go + l) 

(go + 1,0) (go + 1.1) (go + 1, go + 1) 

(2go + l,0) (2go + l,l) 
(g + 2go + 1, 0) 

Let 

Do = H- (2go + 1)P-Q, D, = H- (go + 1){P + Q), = H - P - {2q, + l)Q. 

Then L(A) 7^ 0, and L{Di-P) = dimL(A -<3) = 0, for i = 0, 1, 2. And A e D{P, Q), 
for i = 0,1,2. 

Lemma 10.1. For any nonnegative integer Qq, 

{-go(go + 1), . . . , +go(go + l)} = {a(go + 1) + &go : |a| + \b\ < go}. 
Theorem 10.2. The m inequivalent divisor classes in Dq{P,Q) are represented by 

iDo + jD2, for <i,j < go, and 

L>i + i'Do + j'D2, for < i', f < go - 1. 

The given representatives correspond one-to-one to the m divisors 

D{a, 6) = (a + qo)H - ((a + go)(go + 1) + bqo)P - ((a + go)(go + 1) - bqo)Q, 

for \a\ + |6| < go. 

Proof. 

iDo + JD2 

= t{H - (2go + 1)P -Q) + j{H -P- (2go + 1)Q), 
- (z + j)H + j)(go + l){P + Q)-{t- j)qo{P - Q). 

Moreover, < i, j < go if and only if \i + j — go| + |^ — j\ < ?o- Thus 

{IDq + jD2 ■.0<i,j <qo}^ {D{a, b) : \a\ + < go, a - 6 = (mod 2)} 

H-(qo + 1)(P + Q) + i'Do + j'D2 
= (i' + / + 1)H - (i' + f + l)(go + 1)(P + g) - (if - /)go(P - Q). 
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Similarly, < i', j' < Q'o — 1 if and only if \i' + j' + 1 — go| + ~ j'\ ^ 90 — 1- And 

{H - (go + 1)(P + Q) + I'D^ + fD^ : < i',]' < go - 1} 
= {D{a, h) : \a\ + |6| < go, a-h = l (mod 2)} 

We have constructed m inequivalent divisors in Fp. A divisor A G Fp is a discrepancy if 
and only li K + P + Q - A eV p. With K = 2(go - 1)H, we see that 

D{a, h) + D(-a, -h) = i2qo)H - (2go(go + 1)P - 2go(go + l)Q 
= (2go -2)H + P + Q = K + P + Q. 

□ 

As an illustration, we give the discrepancies for the Suzuki curve + y = + 
over the field of eight elements (go = 2, g = 8, (7 = 14, N = 65, m = 13 = 3^ + 2^). 

■ H -5P-Q ■ 2H - lOP - 2Q 

H-3P-3Q ■ 2H-8P-4Q 

H-P-5Q ■ 2H-6P-6Q ■ 3H - UP - 7Q 

2H-AP-8Q ■ 3H-9P-9Q 

2H -2P - log • 3H -7P- HQ ■ AH - 12P - 12Q 

With H ~ 13Q, we obtain the following multiplicities for the discrepencies at (P, Q). 

(-10,24) 



(0,0) • (-5,12) 

(-3,10) ■ (- 

(-1,8) ■ (-6,20) 

(-4,18) ■ (-9 

:-2,16) ■ (-7,28) 



22) 

(-11,32) 

30) 

(-12,40) 



For the given Suzuki curve, Beelen |Bee07j gives an example of a two-point code for 
which the floor bound exceeds the order bound. The example generalizes to any Suzuki 
curve. For both the Suzuki curve over Fg and over F32 (for which go = 4, g = 32, g = 
124, = 1025, m = 41 = 5^ + 4^), the example is the only two-point code for which the 
floor bound exceeds the order bound. 

Example 10.3. Let A = B = K - H, Z = 2P + 2Q. With dim L{H) - dim L{H - 
2P - 2Q) = 4, it follows that L{A + Z) = L{A) and L{B + Z) = L{B). For the code 
Cn{D, G) = Cl{,D, G)^ with G = K + G = A + B + Z = 2K-2H + 2P + 2Q, 
the threshold divisor C = K — 2H + Z. The floor bound gives minimum distance 
d > deg C + deg Z = d* + A. This is one better than the order bound. 

We give an example of the ABZ bound for codes that improves both the floor bound 
and the order bound. 
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Example 10.4. Let A = B = K - H, Z = {qo + 2)P + 2Q. For the code C^iD, G) = 
CiiD, G)^ with G = K+C = A+B + Z = 2K-2H+{qo+2)P+2Q, the threshold divisor 
C = K -2H + Z. For the ABZ bound we use dimL(A) - dim L{A - C) + dim L{B) - 
dimL{B-G) = 2{dim L{K ~ H) - dim L{H - Z)) = 2 deg{K - H) -deg K + 2 dim L{H). 
The bound d > 10 for go = 2 is one better than both the floor bound and the order bound. 

We illustrate the use of tables Kf{j,i) and N^{j,i) for the comparison of delta sets 
Ap(£g, iP + jQ + Q) and Ap{iQ TQ,iP + jQ + Q) (Proposition EHl). The functions 
dp = dq = dp = d'g all agree and we can omit the index. The functions are defined on 
residue classes modulo m. With Lemma [10.11 and Theorem 110.21 for \a\ + |6| < qq, 

d{k) = (go - o){q- 1), for k = a(go + 1) + bqo - go(go + 1) (mod m) 

Example 10.5. For the Suzuki curve over F32, let C = 55P + 31Q. In this case there is 
a unique choice B = —5Q such that Ap{B,C) > 90. The improvement over the choice 
B = can be seen as follows. 
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The tables use k^ = d{i) - i and k~ = d{i - j) - i + i + j. 
From the tables we obtain 

Ip{0,G)\Ip{-5Q,G) = {k+ e Ip{-5Q,5Q) : k+P e Tp} 

= {0,32,64, (96), (128)}. 

/p(-5Q, C)\/p(0, C) = {k- G Ipi-C, 5Q) : -5Q + k'P ^ Tp} 

= {307,275,243, (211), 303}. 
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The net gain is therefore 4 — 3 = 1 . To reach this conclusion it is sufficient to consult the 
rows (A^+) and (A^"). 

Ap(55P + 31Q) = 36P - Sg, . . . , A45 = 163P - 5Q} 

U {^46 = 180P - 5Q, . . . , Ago = 307P - 5Q} 

Example 10.6. We illustrate the improvemnt of the ABZ bound for cosets over the 
order bound. Both #Ap(0, 9P + 9Q) = #Ap(9Q, 9P + 9Q) = 40. This is the optimum 
for the order bound. For r > 0, 

#Ap(0, C) = #Ap(< rP, C) + #Ap(> rP + P,C). 

For r,s > such that 

#Ap(> rP + P + sQ, C) > #Ap(> rP + P, C) 

we obtain an improvement using the ABZ bound with choices B = rP, Z = sQ (Theorem 
16. 6p . As in the previous example we compare delta sets and find 

/p(0, 9P + 9g)\/p(9Q, 9P + 9Q) = [k" e /p(-9P, 9Q) : k^P e Tp} 
={141, 109, 77, (45), 137, 105, 73, 41, (9)}. 

/p(9g, 9P + 9g)\/p(0, 9P + 9Q) = {k+ e /p(9g, 9g) : 9g + k+P ^ Tp} 
={115, 147, 179, (211), 119, 151, 183, 215, (247)}. 

The information shows that although the delta sets Ap(0, 9P+9g) and Ap(9g, 9P+9g) 
have the same size, the first contains more divisors of small degree and the latter more 
divisors of high degree. For Z = 9Q and for 141 < r < 146 (or 109 < r < 114) we see 
that 

#Ap(> rP + P + sQ, C) - #Ap(> rP + P,C) = 5. 

The order bound gives minimum distance > 40 for the AG code with C = 9P + 9g and 
d > 50 for the AG code with C = lOP + 9g. Thus we improve the minimum distance 
for C = 9P + 9g from d > AO to d > 45. 

Ap(9P + 9g) D{Ai = 0, . . . , = 109P} 

U {Ai9 = 112P + 9g, . . . , A45 = 256P + 9g} 

Example 10.7. The ABZ bound, while more general than the order bound, is still only 
a special case of the main theorem. The following choice of divisors in Ap(12P + 12g) 
gives 7p(12P+ 12g) > 56. This improves both the order bound and the ABZ bound (for 
all possible choices of A, B, and Z as integer combinations of P and Q). 

Ap(12P + 12g) D{Ai = 0, . . . , v424 = 116P} 

U {A25 = 118P + 6g, . . . , A32 = 141P + 6g} 
U {A33 = 143P + 12g, ...,^56 = 259P + 12g} 
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A Coset decoding 



For a given vector ?/ G F", and for an extension of linear codes C C C C F", coset 
decoding determines the cosets of C in C that are nearest to the vector y. If y is at 
distance d{y,C) < t from C and the minimum distance d{C/C') between distinct cosets 
is at least w > 2t then there exists a unique nearest coset c + C with d{y, c + C) < t. 
We describe a coset decoding procedure that returns the unique coset when the estimate 
d{C/C') > w is obtained with Theorem 11.21 The procedure follows the majority coset 
decoding procedure in [Duu] . |Duu93j . 

Shift bound or Coset bound (Theorem II .21) : Let C/Ci be an extension of F-linear codes 
with corresponding extension of dual codes T>i/V such that dimC/Ci = dimT>i/T> = 1. 
If there exist vectors ai, . . . ,aw and 6i, . . . , 6^; such that 

{Oj *bj E V for i + j < w, 

tti * hj G T>i\V foT i + j = w + 1, 

then d{C/Ci) > w. 

For a given x G Vi\D, we may assume, after rescaling if necessary, that Oj * G 
X + V, foT i = 1, . . . ,w. Define the following cosets of Oj and for i = 1, . . . , w, 

Ai = ai + (ai, . . . ,ai_i). 

For c G C, the coset c + Ci is uniquely determined by x ■ c. For a given ?/ G F" such that 
d{y, C) < t, the decoding procedure will look for a pair a' G Ai, b' G such that, for 

all c G C with d{y, c) < t, {a' *b') ■ y = x ■ c. The vector a' * b' is defined as the Hadamard 
or coordinate-wise product of the vectors a' and b'. We use (a' * b') ■ y = {a' * y) ■ b'. 

Theorem A.l. (Decoding up to half the coset bound) Let 2t < w < d{C/Ci), for C/Ci 
and w as in Theorem \1.2[ For y G F" such that d{y,C) < t, let 

I = {l<i<w: [Ba'i G Ai) {a[ * b^) ± y,l < j < w - i }, 
r = {l<j<w: (36;. G 5^+1-,) (a, *b'^) ±y,l<i<j 

For every c E C with d{y, c) < t, x ■ c = {a'i * b[) ■ y, for a majority of i E I H I* . 

Proof. For c E C, let a- G A^ be such that a- *?/ = a'i*c. The vector a-, if it exists, satisfies 
(a- * bj) ■ y = 0, for j = {1, . . . ,w — i}. Moreover, for any b' E {a[ * b') ■ y = 

{a'i *b') ■ c = {ai * ■ c = x ■ c. Let 

T = {l<i<w: {3a'i e At) a'^ * y = a'j * c }, A = {1 < i < w}\r, 

T* = {l<j<w: (36;. G 5^+1-,) b'j*y = b'^ * c}. A* = {1 < j < w}\T*. 
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We know a priori only the sets / and /*. Clearly, F C / and F* C /*. Moreover, for c G C 
with d{y, c) < t, |A|, |A*| < t. For i G / n /*, (a- * 6-) ■ y = x ■ c if either i G F or i G F*. 
Regardless of the actual sets / and /*, this is certainly the case if i G F fl F* and it fails 
only when i G A fl A*. Now 

|F n F*| - |A n A*| = - |F n A*| - |F* n A| > - 2t > 0. 

Thus, the majority of z G / fl /* will give a value {a'^ * b'-) ■ y = x ■ c. □ 

If dimC/C > 1 then the procedure can be applied iteratively to a sequence of exten- 
sions C = Cr C Cr-i C ■ ■ - Ci C Co = C such that dimCj/Cj_i = 1, for z = 1, . . . , r. For 
given I/O ^ 1^" with (i(?/o, Cq) < ^, the procedure returns the unique coset Cq + Ci such that 
diyo, Co + Ci) < t. At the next iteration, for = ?/o — Co G F" with d{yi,Ci) < t, the 
procedure returns the unique coset ci + C2 such that d{yi, ci + C2) < t, and so on. 

Let A = {Ai < A2 < ■ ■ ■ < Aw} C Ap(C) be a sequence of divisors with Aj+i > 
Ai + P, for i = 1, . . . ,w — 1. Theorem 15.31 (Main theorem) together with Lemma 14.21 
shows that d{CniD, G - P)/GniD, G)) > w, for G such that G = G - K - P, and for 
D n {Ayu — Ai) = 0. We show how the coset decoding procedure applies to the given 
extension. For a divisor Ai G Ap(C), also K + G + P - Ai = G - Ai G Ap(C). Thus, 
there exist functions fi G L{Ai)\L{Ai - P) and gi G L{G - Ai)\L{G - Ai - P). Let 
(tti * bw+i-j) = {{figj){Pn), . . . , {figj){Pn)), for i < j. Then 

ttj * bj G Gl{D, G) for i + j < w, 

a, * bj G Gl{D, G)\Gl{D, G-P) for z + j = w + 1, 

Moreover, we have the following interpretation for the sets F, F*, A, A*. 

2 G F ^ A e Fp(g), 2 G A ^ A,e Ap{Q), 

ieT* ^AieAp{G-Q), i e A* ^AieTp{G-Q). 

The order bound (Theorem 16. 3p and the floor bound (Theorem 12. 3p as well as their 
generalizations the ABZ bound for cosets (Theorem 16.61) and the ABZ bound for codes 
(Theorem 16.71) are all obtained in this paper as special cases of the main theorem. Thus, 
in each case coset decoding can be performed with Theorem I A. 1[ 
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